Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File:                     p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier:          T79fQibG6TKxJHD7+WHV3wfXwCdwRuFzVCYyipIdnmg=
Subject key identifier:   81:2D:AA:B1:74:64:DE:D9:36:F7:FC:6C:6E:0C:65:50:65:BB:BA:F1
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer:       /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial:       0194BC3C801A48D9E07E2854669E69006923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:08 +0000
Files and hashes:         1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
                          2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
                          3: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
                          4: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
                          5: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
                          6: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: w9VNfXRVuwy2A7RkhagULD0oT240ZLkNFIvwR+Mxaxw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:80:1a:48:d9:e0:7e:28:54:66:9e:69:00:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
        Validity
            Not Before: Jan 31 12:01:08 2025 GMT
            Not After : Feb  1 12:01:08 2025 GMT
        Subject: CN=812daab17464ded936f7fc6c6e0c655065bbbaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:cb:ee:ee:6b:15:82:ad:f0:96:61:32:aa:
                    ad:ec:2d:cf:11:03:fd:7c:2d:ab:22:a0:31:88:12:
                    aa:66:e0:47:6e:6b:74:de:78:cd:9c:f3:84:63:13:
                    32:1d:98:e3:5c:17:a6:68:81:d2:7f:38:62:40:e2:
                    e0:7f:42:a2:b7:0f:e5:2b:82:4a:80:84:02:bf:db:
                    71:0d:d8:82:2e:a4:0c:44:75:d5:61:0e:c4:60:71:
                    5a:fa:1f:b8:6e:9f:0e:7e:50:83:ad:72:36:44:f4:
                    44:f6:25:89:a0:2b:39:e1:f6:81:57:2a:50:28:2d:
                    8f:0a:0b:5c:93:2b:78:19:50:1f:12:23:cf:94:a4:
                    48:07:e8:a3:42:30:1b:01:ae:36:cc:60:6d:07:84:
                    2e:da:b4:f2:d5:f4:80:dd:66:f6:5f:52:43:5f:9b:
                    40:e6:d3:17:41:4c:98:8e:dc:a0:c4:26:f7:12:eb:
                    8f:59:dd:86:85:43:4a:9a:7f:80:d1:f6:6c:15:b1:
                    ac:0b:c4:70:41:1f:d6:29:b1:fa:6b:2d:7b:5a:97:
                    9a:c4:67:7d:65:2c:52:c3:cf:ac:18:f8:7f:bb:ef:
                    90:6a:46:26:14:ef:84:11:c0:e3:3c:4f:84:f2:19:
                    53:e1:7e:f7:bb:77:0a:5e:96:0a:bc:8e:74:0d:ae:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2D:AA:B1:74:64:DE:D9:36:F7:FC:6C:6E:0C:65:50:65:BB:BA:F1
            X509v3 Authority Key Identifier:
                keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:29:20:60:33:d4:bf:7d:b6:ee:30:0a:89:5b:21:78:1e:
         42:30:f7:eb:85:18:d1:ac:47:aa:9e:97:0b:6a:c7:b1:01:ff:
         bc:9f:cb:10:b3:e0:f9:78:53:6b:fb:ea:f2:83:02:9c:53:8e:
         59:ba:ea:ef:1e:84:93:59:57:90:f6:f3:3e:0c:74:82:58:58:
         af:8f:3a:67:cc:a2:c6:e6:c5:47:f9:6c:52:51:92:81:28:eb:
         52:09:53:5f:a8:82:f3:3c:66:6e:c4:86:ba:8c:26:63:93:67:
         3a:ee:78:d3:c5:7b:d6:8a:6a:b0:b9:64:51:7f:d3:d9:11:53:
         4f:14:20:c0:64:71:b1:c5:c3:ee:8d:4e:3f:b1:4b:aa:f7:f0:
         e6:34:e9:13:f7:a2:cc:5d:db:e1:56:2d:0a:6f:f3:c0:04:3c:
         e2:01:5a:91:f0:be:f8:32:35:d9:9d:f3:85:ba:00:64:15:4b:
         3e:d4:e8:06:f5:60:ee:1a:f3:1a:10:31:45:d9:9d:f6:32:a7:
         49:6b:0e:0d:d4:c3:c9:e0:7c:52:43:57:aa:06:b9:02:a9:f5:
         7c:76:64:bb:ac:93:2a:3d:e5:c2:de:41:ea:e2:23:fd:48:78:
         be:cb:ee:a1:8a:2f:b0:93:52:8e:50:72:45:ba:c6:33:66:75:
         89:d1:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----